Organizational IT Security and Troubleshooting Essay examples

As we all know people are where we see the biggest problems in security breaches and problems on any computer or network system. People need to understand what they are allowed and not allowed to do, this is where policies, procedures, and training come in to play.

The departments of a company that are holding personal information are required to have adequate security measures in place. Those include technical measures (such as firewalls) and organisational measures (such as staff training).

The physical protection of information, personnel, software, buildings and other material resources are the first thing that should be assessed when looking into security, obviously there are unavoidable disasters such as natural disasters, man-made disasters and loss of electricity, air or water but most issues are preventable, by monitoring who has access to what and how much access they have, by locking rooms and PC’s, using person specific swipe cards, bolting computers to desks, having effective CCTV in place, and by having effective monitoring tools an IT team can keep a close eye on valuable data and prevent risks. Electronic security systems are designed to protect against unwanted personnel and they provide free roaming for wanted personnel. An electronic security system is a series of biometric locks, or a single biometric lock. A biometric lock is a system that can provide control of entry (or exit) within a designated area by the use of an electronic locking facility. The most common biometric lock is a pin pad system which is a keypad that requires the exact combinations of keys to open the lock, the keys are generally numbers but can be emphasised as letters, shapes, or sounds. Secondly and commonly are swipe cards which are encoded cards which hold information on the user, there is normally a swipe slot to enter a facility that have chosen to

With the rapid increase in the number of attempted breaches and resulting damages, there is an increased need for user authentication, especially with numerous unknown mobile devices with which consumers are using to access to IT resources.

Physical security will involve the company securing its assets by devices such as alarm system for off hour use, and identification cards for employees. A process should be in place to make sure that guests are properly identified before gaining assess to the facility. Users cannot take computer home unless they are protected by encryption software. Downloading proprietary information onto floppies, CD, thumb/flash/memory drives and other portable media should be disallowed unless such transactions are pre-approved and proper security measures are taken.

Most organizations do not like to implement strict password policies as this is relatively undesirable by the organizations users. However, failure to implement such a policy leaves the organization very vulnerable to someone being able to gain unauthorized access. There are several courses of action that can be taken by the organization to mitigate this threat. One that would practically eliminate the threat would be implement a multi-factor authentication system. This requires that the user attempting to authenticate must have multiple items to authenticate whether it is something they have such as an ID card combined with something they know such as a PIN, or something they know such as their username, and something they are such as a fingerprint. This form of authentication makes it almost impossible for an unauthorized user to gain accesses, because if they are able to obtain one part of the equation, say the part that someone knows, they must also obtain the second part which is something that person has or is. Without these two separate keys, the unauthorized user won’t be able to unlock the door and obtain access to the organizations information resources. Although implementing a multi-factor authentication solution can be relatively expensive and time consuming. So if the organization chooses to stay with a single-factor authentication system, then they need to implement a strict password policy that requires complex passwords, along

The first task I will be creating a check-list for the numerous procedures that will help secure the network secure, one policy I will be entering in the check-list is password policy. This type of authentication is used in most websites and many organization that requires a password like Facebook, eBay, and websites that as secure data. It can be secure depending on how decent the password is, usually the user-name is the most secure part as its just specific for that user, also for the user to make his or her password secure is by using capital letter, spaces, number and not something the hacker can guess like the same as your user-name or birthdays and your name, also the user can change and updated any time they want, and if you get either

The next step option to further prevent this security will involve restricting access to data by requiring a password, personal identification numbers, or a callback procedure. This approach will restrict logon time to a maximum of 2 minutes; if the computer goes idle for 2 minutes, a login password will be required to gain access to the system. The only problem with previous approach will the redundant need to frequently reenter password, to alleviate this problem associated with redundant authentication, the organization can adopt the use of a biometric method of authentication, for example, the use iris scanner, fingerprint, or an electronic signature (Joos et al, 2010).

In the article “Beyond passwords: Companies use fingerprints and digital behavior to ID employees” by Selena Larson discusses the future of online identities and the implications it will have for companies and customers. In the past, online identity has consisted of passwords which are easy for hackers to break into and hard for people to remember. This negativity associated with passwords is an ongoing dilemma which no one is satisfied with. For companies being hacked compromises their reputation as being a safe and secure space, but they also spend millions a year on help desk calls for customers. Companies want to create a solution to this dilemma that will be more effective and efficient. Recently, companies have been ditching passwords

Some of the items that will need to be made aware of and shared with executives, employee and the stakeholders of the organization is the managing and protection of Access Control and attack monitoring system, each and every member of the company will need to understand and abide by the policies that govern access control in the workplace, allowing other employees to enter a facility without each employee scanning their badges will be a breach of security. The awareness of securing network architecture and network communications components, raise awareness on security governance concepts and policies and risk and personal management. The support of the entire organization in the changes and improvement will results in an effective strategic

I think that the top boss and the company techniology security group should be responsible for a company's intranet. I think that they should have an option where employees and consumers can give ideas and they take a look into it to see if it will work. Having a strong firewall, installing antivirus protection, update your programs regularly, use number and letters in passwords can help ensure proper use of passwords. I think access levels show be determine by how much protection the consumer wants. For example, with iPhones people have mutiple options on how they can to set up their passwords. Like 4 digit code, finger print, they can set up additional password as backup just in case they phone does not read their finger print.

a significant amount of data security breaches are due to either employee oversight or poor business process. This presents a challenge for businesses as the solution to these problems will be far greater than simply deploying a secure content management system. Business processes will need to be examined, and probably re-engineered; personnel will need to be retrained, and a cultural change may be required within the organization. These alone are significant challenges for a business. A recent example of what is probably unintentional featured an Australian employment agency’s web site publishing “Confidential data including names, email addresses and passwords of clients” from its database on the public web site. An additional

Establishing an effective Information Technology Security Policy Framework is critical in the development of a comprehensive security program. The purpose of the Information Security Policy Framework is to insure your organization will be able to provide the minimum security level necessary to maintain confidentiality, integrity, and availability of the information it collects and uses.

The reader will become familiarised with the term risk and it definitions from specifically the ISO 31000 standard of risk management and also the definition of risk from the criminology crime triangle. Which one of these two definitions that are the most suitable for usage within the security industry will be discussed and evaluated. How and why consequence is important when assessing risk priorities and determining where to allocate resources will be examined and answered.

A threat agent is the facilitator of an attack however; a threat is a constant danger to an asset.